CVE-2016-3716: Medium severity ubuntu vulnerability
Published May 5, 2016
·Updated
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
Affected Software
19 affected components
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Canonical Ubuntu Linux=16.04
ImageMagick ImageMagick<=6.9.3-9
ImageMagick ImageMagick=7.0.0-0
ImageMagick ImageMagick=7.0.1-0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Hpc Node=6.0
redhat Enterprise Linux Hpc Node=7.0
redhat Enterprise Linux Hpc Node Eus=7.2
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.2
redhat Enterprise Linux Server Eus=7.2
redhat Enterprise Linux Server Supplementary Eus=6.7z
redhat Enterprise Linux Workstation=6.0
redhat Enterprise Linux Workstation=7.0
Remediation
Event History
May 5, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-3716?
CVE-2016-3716 has been classified with a high severity due to its ability to allow remote attackers to manipulate files.
2
How do I fix CVE-2016-3716?
To fix CVE-2016-3716, update ImageMagick to versions 6.9.3-10 or 7.0.1-1 and later.
3
Which versions of ImageMagick are affected by CVE-2016-3716?
CVE-2016-3716 affects ImageMagick versions prior to 6.9.3-10 and 7.x versions before 7.0.1-1.
4
What platforms are vulnerable to CVE-2016-3716?
CVE-2016-3716 impacts multiple platforms including Ubuntu Linux 12.04, 14.04, 15.10, 16.04 and various Red Hat Enterprise Linux versions.
5
How can remote attacks exploit CVE-2016-3716?
Remote attackers can exploit CVE-2016-3716 by using crafted images to move arbitrary files on the server.